ipf & icmp pakety - kde je problem ?
Juraj Lutter
otis at wilbury.sk
Wed Jul 17 16:16:44 CEST 2002
On Wed, Jul 17, 2002 at 04:05:42PM +0200, Brano Vislocky wrote:
> Ahojte,
> block in log on ep1 all head 1
> pass in quick on ep1 proto icmp from any to 1.2.3.4/32 icmp-type 0 group 1
> pass in quick on ep1 proto icmp from any to 1.2.3.4/32 icmp-type 11 group 1
>
>
> predpokladam, ze 1. riadok je 'default' pravidlo pre group 1
>
> no a problem je ten, ze ked ping-ujem kartu ep1, tak sa mi v logoch
> objavi take nieco:
>
> ipmon: 15:05:40.992524 ep1 @0:6 b x.x.x.x -> 1.2.3.4 PR icmp len 20 84
> icmp echo/0 IN
co takto skusit pridat 'keep state' k pass in?
otis
--
Juraj Lutter
http://wilbury.sk/
bgpd eats bugs for breakfast.
More information about the Users-l
mailing list